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[0001] This invention relates to adding a code indica- 
tive of ownership or other authentication code to an elec- 
tric signal so as to make it difficult for outsiders to per- 
ceive the existence of the code and/or remove the code 
from the signal. The invention relates to both the method 
and a device for implementing the method. In this patent 
application, the signal used as an example is a two-di- 
mensional image presented in electric form, particularly 
a still image produced by a photographic apparatus. 
However, the invention can also be generalized to other 
signal types, as will be described in more detail herein- 
after. 

[0002] It is usually rather easy to copy and duplicate 
electrically presented information, which makes it more 
difficult to control that copyrights are observed. Accord- 
ing to international agreements, copyright to a certain 
image belongs to the producer of the image. If the pro- 
ducer saves the image in the form of an electric file in a 
computer, which is connected to a wide information net- 
work, such as internet, it is possible that another user of 
the network copies the image file and uses it in other 
contexts without paying compensation to the producer, 
who is entitled to it on the basis of the copyright. If the 
producer wants to present a legal claim for compensa- 
tion, he must be able to prove that the image used else- 
where is a copy of the image produced by the person 
claiming for compensation. It would be very important 
for the producer that even after the transfer and possible 
processing measures it would be possible to find some 
information indicative of the origin of the image from the 
file transferred in electric form. However, this informa- 
tion must be so hidden that a dishonest user cannot re- 
move it or even perceive its existence. 
[0003] Methods used to indicate ownership of image 
files can be divided into two main categories. In water- 
mark methods, a graphic element is added to the image, 
which element can be isolated afterwards and shown as 
a graphic evidence to prove that it has been added to 
the image on purpose, and that it is not a random com- 
bination of parts of the image. In checksum methods, a 
checksum or a logical combination is calculated by a se- 
cret method from the bits and/or bytes used to present 
the image, and this combination is added to the image 
file as part of it. The origin of the image is detected by 
calculating the same logical combination afterwards and 
comparing it to the original checksum contained by the 
file. Because only the real owner of the image knows 
the correct calculation method for the checksum, the 
probability of getting the same sum with a method cho- 
sen at random is small. 

All the above mentioned methods have the following 
common objectives: 

the visual quality of the image must not suffer from 
the addition of the authentication code to the image, 
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only the producer and possibly an independent, re- 
liable testing institution can check the authentica- 
tion code hidden in an image, 

5 - the authentication method must allow the use of 
many kinds of authentication codes or "signatures", 

the authentication code must remain in the image 
with a sufficient reliability, even if the image is 
io packed with the JPEG or MPEG algorithm, for ex- 
ample, and 

the authentication code must endure attempts to pi- 
rate the images or to cover the real origin of the im- 
15 age. 

[0004] In watermark methods, the graphic element 
used as a authentication code is generally called a wa- 
termark or signature. One known, watermark-type 

20 method has been presented in the publication R.G. van 
Schyndel, A.Z. Tirkel, C.F. Osborne. A Digital Water- 
mark, Proceedings of ICIP -94, Volume II of III, pp. 
86-90, IEEE, Austin, Texas, 1994. For other publications 
dealing with prior art methods for authentication coding 

25 of images, please see the reference list at the end of the 
descriptive part of this application. Generally in the prior 
art publications, the signature is converted to a virtually 
random form, the pixels of which are scattered on the 
image to be authentication coded. A disadvantage of 

30 these methods is the fact that the calculation method is 
very complicated. 

[0005] The object of this invention is to present a 
method and a device by which the above described ob- 
jectives of the authentication coding of signals can be 

35 achieved easily and reliably. 

[0006] The objects of the invention are achieved by 
attaching the signature to the original signal by a filtering 
method, which changes the value of the pixels or other 
signal parts indicated by the signature in a controlled 

40 manner. 

[0007] The method according to the invention for hid- 
ing an authentication code in an electric signal is char- 
acterized in that the value of each data part selected 
from the signal for processing is specified anew by a 
45 filter, the input data of which consist of certain other pre- 
determined data parts of the electric signature. 
[0008] The invention also relates to a device for im- 
plementing the method described above. The device ac- 
cording to the invention is characterized in that it corn- 
so prises a filter and the processing unit of the device is 
arranged to re-determine the value of the data parts se- 
lected for processing in a manner specified by the filter. 
[0009] For the sake of clarity, the following description 
will focus on the example in which the original signal is 
55 a two-dimensional still image, and the signature is a cer- 
tain graphic element. In the method according to the in- 
vention, the signature is thus preferably a two-dimen- 
sional binary array, consisting of bits which have a value 
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of either 1 or 0. Shown as a bit map, a signature of this 
kind is a two-color image (typically black and white), in 
which the bits with the value 1 are shown as black pixels 
and the bits with the value 0 as white pixels or vice versa. 
The signature is set "on top of" the original image as a 
mask at a desired point, and only the pixels which coin- 
cide with the 1 -bits of the signature are selected from 
the original image for processing. A natural, alternative 
method is to select for processing only the pixels which 
coincide with the 0-bits in the signature. A new value is 
calculated for each pixel of the original image being 
processed with a filter, the input data of which consist 
of certain pixels of the original image which do not be- 
long to the pixels being processed. When a new value 
has been specified for all pixels being processed, the 
authentication coding has been completed. 
[0010] The filter, which is used to calculate newvalues 
for the pixels of the original image selected for process- 
ing, can be chosen rather freely. A filter which is advan- 
tageous with regard to the invention is such that with 
great likelihood it will alter the value of any randomly 
selected pixel, but the alteration is small. Filtering can 
be defined extensively as any operation in which the 
new value of a certain pixel or other data part is specified 
deterministically on the basis of the values of pixels or 
other data parts which are used as input data for the 
filter. 

[0011] In order to perceive the authentication coding 
accordingtothe invention, the entire authentication cod- 
ed image is filtered pixel by pixel with the same filter 
which was used to implement the authentication coding. 
Because the filter is very likely to change the value of 
any pixel being processed, most of the values of the pix- 
els in the image are changed. Only the pixels which had 
their value changed according to the filter already in the 
authentication coding, remain unchanged. The observ- 
er marks those pixels in the image which have not 
changed. If these pixels form the graphic element used 
as a signature, the copyright of the image has been 
proven. 

[0012] In various modifications of the invention, the 
original image can be processed in many ways before 
the signature is added to it. One advantageous method 
is to use a known transformation, the reverse transfor- 
mation of which is known, to process the original image. 
The signature is added to the transformed image with 
the filtering method described above, and the image 
thus received is reversely transformed back to the orig- 
inal form. The signature can also be oversampled before 
it is added to the original or transformed image, which 
in practice means that the signature is duplicated and 
added at several positions on the same image. 
[0013] In the following, the invention will be described 
in more detail with reference to the preferred embodi- 
ments presented by way of example and the accompa- 
nying drawings, in which 

Figure 1 shows the selection of the pixels accord- 



ing to the invention, 

Figure 2 shows a filter according to the invention, 

5 Figure 3 shows the detection of the authentication 
coding according to the invention, 

Figure 4 shows the proceeding of an embodiment 
of the invention, and 

Figure 5 shows a device according to one embod- 
iment of the invention. 

[0014] Figure 1 shows a simple digital image 100, but 
15 for the sake of clarity the color of its pixels is not shown 
in Figure 1, and a simple binary signature 101, in which 
the 1 -pixels are shown black and the 0-pixels white. The 
digital image 100 has M x N pixels, which are divided 
into numbered columns and lines (here M = 12 and N = 
20 15). The value of each pixel is generally an 8-bit byte or 
a 16-bit pair of bytes. A real digital image to be authen- 
tication coded typically has hundreds of thousands or 
millions of pixels. A real signature is generally also much 
larger and more complicated than the example in Figure 
25 1. The size of the signature is generally H x K pixels 
(here H = 5 and K = 7). So as to make the signature fit 
into the image in its entirety its size can be limited as H 
< M and K < N. 

[0015] In authentication coding according to the sim- 

30 pie embodiment of the invention, the person who is car- 
rying out the coding selects from the original image 1 00 
a location in which the signature 101 is to be placed. It 
is advantageous to have the location selected freely, be- 
cause then the potential image pirate will not know 

35 whereto lookforthe signature in the image. The location 
is preferably indicated as the coordinates of the pixel on 
which the pixel number (1,1) of the signature hits. Let 
us assume that the person who is carrying out the cod- 
ing selects the location (3,3). In the example of the fig- 

40 ure, the pixels of the original image on which the 1 -pixels 
of the signature hit are selected for processing. In Figure 
1 , these pixels of the original image are marked with x. 
[0016] Each pixel of the original image selected for 
processing is processed separately by a filter, the de- 

45 tailed implementation of which can be freely chosen by 
the person who is carrying out the authentication coding. 
The only limitation set by the invention for the filter is 
that it must not use any of the selected pixels as input 
data. Thus the implementation of the filter is somewhat 

so dependent on how the pixels 1 and 0 are divided in the 
signature. From Figure 1 it can be seen that the signa- 
ture used as an example does not contain adjacent or 
diagonally adjacent 1 -bits, and thus the filter can use as 
input data for the filtering of a certain pixel all the eight 

55 pixels surrounding the pixel to be filtered, for example. 
Figure 2 shows a diagram of a filter in which the filtered 
value of the pixel x marked with diagonal lines is the 
same as the mean value of all the eight pixels surround- 
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ing it. This filter is very suitable for a case like the one 
shown in Figure 1. 

[0017] Because the original image is typically a pho- 
tograph-type image, in which many adjacent pixels are 
very unlikely to have exactly the same value, it is almost 
certain that a filter like the one shown in Figure 2 will 
change the value of the pixel selected. On the other 
hand, radical changes of the pixel value on a length of 
a few pixels are rare, and so the filter shown in Figure 
2 is likely to change the value of the pixel only a little. 
Both of these are advantageous features with regard to 
authentication coding. When all the pixels of the original 
image selected for processing on the basis of the sig- 
nature have been separately filtered with the chosen fil- 
ter, the authentication coding according to the simple 
embodiment of the invention has been completed. If any 
of the pixels selected for processing had been situated 
very near the edge of the image, the window 200 depict- 
ing the selection of the input data had been located part- 
ly outside the image. For cases like this it is possible to 
define a so called wrap-around protocol, according to 
which transition from the pixel at the edge of the image 
to the area outside the image is interpreted as transition 
to a pixel at the opposite edge of the image (in other 
words, the location of the pixels in the columns is defined 
as modulo the number of columns and similarly in the 
rows modulo the number of rows). 
[0018] Figure 3 shows the detection of authentication 
coding in an image which has been authentication cod- 
ed by a method according to the simple embodiment of 
the invention described above. The digital image 300 is 
filtered pixel by pixel with the same filter which was used 
to hide the signature in the original image. The frame 
301 depicts the location of the selection frame of the 
filter input data at a certain pixel, and the arrows pro- 
ceeding pixel by pixel describe the moving of the frame 
pixel by pixel forward, until the whole image has been 
filtered. The value of most pixels will change in the fil- 
tering, as has been stated above. However, the value of 
those pixels which have already been filtered when the 
signature was hidden, does not change, because filter- 
ing on the basis of the same input data pixels gives the 
same result both during the hiding and discovery of the 
signature. In addition, it can be assumed that there are 
some pixels in the image which happen to have such a 
value that it does not change during the filtering. On the 
basis of the filtering results, a so called detection image 
is formed, in which the pixels which remained un- 
changed in the filtering are clearly distinguished from 
those which had their value changed. In Figure 3, for 
example, the first mentioned pixels are shown black and 
all other pixels white. The pixels at the points (2,1) and 
(1 ,N) of the image are randomly found pixels and other 
pixels marked black belong to the signature. 
[0019] If the signature is a certain regular and easily 
recognizable graphic element and if there is a relatively 
small amount of randomly found "non-changing" pixels, 
the signature can generally be clearly seen with the na- 



ked eye in the detection image, when the whole image 
has been filtered. If one of these conditions is not met, 
the signature can be searched by statistical methods 
from the detection image. In practice, this is generally 

5 most easily implemented by forming a convolution of the 
signature and the detection image, in which the known 
signature is compared to each of its possible locations 
on the detection image, and a characteristic is calculat- 
ed to describe how well the pixel content of the signature 

io corresponds to the pixel content of the detection image 
in each possible location. If the highest value of the con- 
volution shows that at the most suitable location over 
90% of the pixels have the same value as the corre- 
sponding pixels of the detection image, it is relatively 

15 certain that the signature has originally been placed at 
the location in question. It is not possible to demand that 
the signature and the suspected location on the detec- 
tion image are fully identical, if there is the possibility 
that a packing algorithm or some other factor causing 

20 loss of information has changed the contents of the im- 
age after the authentication coding. 
[0020] In the simple embodiment of the invention de- 
scribed above the person who performs the coding can 
choose the signature, its location on the original image 

25 and the filter by which both the authentication coding 
and its detection is performed. Because the number of 
possible signatures is almost limitless when large imag- 
es are processed and because there are many possible 
filters, without knowledge of the form of the signature 

30 and the filter used it is difficult even to know whether a 
certain image has been authentication coded or not, and 
to discover and remove the signature used in the coding 
is even more difficult. However, it is possible to think of 
a situation in which an image pirate gets hold of both the 

35 original, uncoded image and its authentication coded 
version. If the difference of these images is calculated 
by pixels, the signature becomes visible, because the 
authentication coding has only changed the value of the 
pixels selected on the basis of the signature, while other 

40 pixels have remained unchanged. When the signature 
has been found, the image pirate can perform a statis- 
tical analysis of how the values of the original image 
have been changed in the authentication coding, in 
which case it may even be possible to find out what kind 

45 of a filter was used in the coding. On the basis of this 
information, it is also possible to try to break the authen- 
tication coding of other images produced by the same 

[0021] In order to eliminate this disadvantage, anoth- 
so er embodiment of the invention has been developed, 
and it will be described in the following with reference to 
Figure 4. At the beginning of the coding, the original im- 
age 400 is transformed into another form 401 by the 
transformation T, the reverse transformation T" 1 of 
55 which is known by the person who performs the authen- 
tication coding. The signature 402 is added to the trans- 
formed image by using the filter 403 in the same way as 
has been described above. The transformed image, to 
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which the signature has been added by filtering, is re- 
versely transformed into the image 404, which other- 
wise corresponds to the original image 400 but in addi- 
tion contains the signature in a form which is the result 
of the filtering 403 and the reverse transformation T 1 . 
When observed with the naked eye, it is usually impos- 
sible to distinguish the image 404 from the original im- 
age 400. 

[0022] In order to detect the authentication coding, the 
image 404 is again transformed with the transformation 
T, resulting in the image 405. When it is filtered pixel by 
pixel with the filter 403, and all the pixels with an un- 
changed value are marked, the result is the detection 
image 406, from which it is further possible either to vis- 
ually perceive or by statistical methods to discover the 
signature 402. 

[0023] The transformation T can be freely chosen by 
the person who performs the authentication coding, as 
long as it is deterministic and its reverse transformation 
T" 1 is known. In this embodiment the person performing 
the authentication coding can use, in addition to the sig- 
nature, its location and the filter mentioned above, a 
fourth factor which can be freely chosen and which 
makes an unauthorized detection of the signature and 
thereby the possibility of breaking the authentication 
code even more difficult. One known transformation T, 
which can be used as shown in Figure 4, is a discrete 
cosine transformation. Another possible transformation 
is the division of the image (virtually randomly, for ex- 
ample) into two or more partial images, wherebythe sig- 
nature is added to only one of them or in which partial 
images the signature is added to different locations. The 
division of the image into partial images can take place 
by "cutting" part of the pixels to different partial images 
or by dividing the value of each pixel into parts (for ex- 
ample, the four most significant bits of each pixel into 
the first partial image and the rest of the bits into the 
second partial image) or in other ways. A person skilled 
in the art can easily present many suitable transforma- 
tions. There are many algorithms and electric circuits on 
the market, by which various transformations and re- 
verse transformations can be quickly and easily calcu- 
lated for the images, and thus the more advanced em- 
bodiment of the invention does not make the implemen- 
tation of the invention substantially more complicated. 
[0024] One variation, which makes the authentication 
coding according to the invention more resistive against 
the disappearance of information caused by the packing 
algorithms of the image files, is oversampling of the sig- 
nature before it is added byfilteringtotheoriginal image 
or the transformed image obtained by transformation. 
Oversampling means increasing the pixel division of the 
signature. If a two-dimensional signature is double over- 
sampled both vertically and horizontally, each original 
pixel of the signature become four pixels with equal val- 
ue. In other words, the original signature is duplicated 
into four copies, which are placed on the image to be 
authentication coded regularly in relation to one another 



or even independent of one another. Thus the likelihood 
that at least one copy of the signature becomes clearly 
visible when the authentication coding is to be detected, 
is very high. The rate of oversampling can be freely cho- 

5 sen by the person performing the authentication coding. 
If several copies of the signature are added to the same 
image, different filters can be used to add each copy. 
Then the copy of each signature can naturally be de- 
tected only by using the same filter that was used to add 

io it to the image. When several copies are being added 
to the image, attention must be paid to avoid overlap- 
ping. 

[0025] An important place of application for authenti- 
cation coding of two-dimensional images is in digital im- 

15 age archives, which are connected to Internet or such 
another general data transfer network, and from which 
the users can select and copy any image files they want. 
The keeper of the image archive can protect the images 
in the archive by authentication coding according to the 

20 invention and, for example, send a program called 
"agent" to the data network to search automatically for 
other image files and test if an authentication coding 
made by the keeper of the image archive can be found 
in them. If a signature is found in an image file which 

25 has not been legally acquired by a legal agreement from 
the keeper of the image archive, it proves that the holder 
of the file has acquired the possession of it without per- 
mission. A single image on a www home page can also 
be authentication coded so that its unauthorized copy- 
so ing to other places in the data network could be detect- 
ed. A browser program, which the legal owner of an au- 
thentication coded image or images uses to get other 
information from the data network, can be equipped with 
an authentication coding detection part, to which the us- 

35 er inputs information of the signature, filter and possible 
transformation used. Thus the owner of a certain image 
or images can - when finding a familiar image in the net- 
work - by pressing a key or clicking the mouse examine 
if it contains the owner's signature. 

40 [0026] The above description concerned the applica- 
tion of the invention to the authentication coding of two- 
dimensional digital images shown in bit-map form. How- 
ever, the invention can be extended to the processing 
of many types of electric signals. A video performance 

45 is a series of two-dimensional images shown rapidly in 
succession, and any one of them, or each of them, can 
be supplied with a signature as described above. On the 
other hand, a video performance can utilize the time di- 
mension by making the filter used for authentication 

so coding and its detection three-dimensional, whereby it 
uses certain pixels contained by two or more consecu- 
tive images, for example, as input data. The signal to be 
authentication coded and the signature and filter used 
in the authentication coding can also be one-dimension- 

55 al: for example, a digital telephone signal, which is a se- 
ries of temporally consecutive bytes. In this case, the 
signature can be a certain line of bits, of which the bytes 
corresponding to 1 -bits (alternatively 0-bits) from a cer- 



5 



9 

tain, regularly repeating sequence of telephone signal 
(for example, a speech frame corresponding to 20 ms 
of speech time) are selected for processing. The term 
"data part" mentioned above in connection with the gen- 
eral description of the invention means all the parts of 
the signal shown in electric form which can be identified 
and selected for processing as described above and the 
value of which can be changed by means of a certain 
filter. 

[0027] The authentication coding of audio and video 
signals or other temporally continuous signals, in partic- 
ular, shows that the signal need not be a certain file with 
limited size, as in the authentication coding of still imag- 
es. By the method according to the invention, the au- 
thentication coding can be added to a temporally con- 
tinuous signal at certain regular or irregular intervals. 
This property of the invention can be utilized for identi- 
fying an electric signal produced by a certain device (tel- 
ephone, video camera, tape recorder etc.): the device 
can contain a sealed authentication coding circuit, to 
which a certain signature, a certain filter and when re- 
quired, a certain transformation and its reverse transfor- 
mation, characteristic of this device, have been perma- 
nently saved. At regular or irregular intervals, the au- 
thentication coding circuit separates a cycle from the se- 
quence generated by the device, to which sequence it 
hides the signature in a manner according to the inven- 
tion. Afterwards, the signal generated by the device can 
be sent to be analyzed by such a trusted person or per- 
sons who know the information saved in the sealed au- 
thentication coding circuit. By means of this information, 
the trusted person can prove which device was used to 
produce the signal. 

[0028] Figure 5 shows a diagram of a device for im- 
plementing the method according to the invention. The 
device has a microprocessor 500, which is equipped to 
read and write images or other signals from the storage 
blocks 501 and 502 and to carry out the signal process- 
ing operations required by the invention. The microproc- 
essor also has a two-way data transfer connection to 
the storage blocks 503, 504 and 505, the first of which 
is intended for saving the filter used in the filtering, the 
second is intended for saving the data used as a signa- 
ture, and the third is intended for saving the transforma- 
tion T and its reverse transformation. A display unit 506 
has also been connected to the microprocessor for con- 
veying information to the user, and a keyboard 507, by 
which the user can control the operation of the device. 
It this were a sealed authentication coding circuit, the 
purpose of which is to operate in a certain larger device, 
certifying the origin of the information produced by the 
device, the keyboard and display would not be needed, 
and the information of filter, signature and transforma- 
tion would be saved permanently in the storage blocks 
503, 504 and 505. In this connection, sealing means any 
known arrangement by which the contents and opera- 
tion of a certain electric circuit is protected so as to make 
unauthorized detection thereof difficult. 
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[0029] The user inputs to a device according to Figure 
5 the information of the filter, signature and transforma- 
tion wanted by using the keyboard 507 or a correspond- 
ing data input device. In addition, the user enters a com- 

5 mand, which means the authentication coding of an im- 
age file or another file. The file in question is then saved 
in the storage block 501 . The microprocessor 500 reads 
the file to be authentication coded, transforms it accord- 
ing to the transformation T read from the storage block 

io 505 and saves it in the storage block 502. It is thus ad- 
vantageous to have two separate storage blocks 501 
and 502, because if the transformation is interrupted or 
an error occurs during the process, the entire file is not 
destroyed but its original version remains saved in the 

15 storage block 501 . Next, the microprocessor 500 reads 
the transformed file from the storage block 502 and 
saves it back to the storage block 501 so that it changes 
the values of the pixels or other data parts in a manner 
determined by the filter read from the storage block503. 

20 Finally, the microprocessor reads the file again from the 
storage block 501 , reversely transforms it and saves the 
authentication coded file in the storage block 502. The 
microprocessor informs the user of a successful com- 
pletion of the authentication coding via the display 506. 

25 [0030] When the user uses the keyboard to enter a 
command 507, meaning the detection of the authenti- 
cation coding from the file saved in the storage block 
502, the microprocessor reads the file, transforms it and 
saves the transformed file in the storage block 501 . In 

30 the next step, it reads the transformed file from the stor- 
age block 501 , filters it and forms a detection file in which 
the data parts which had their value unchanged during 
filtering, are marked. The detection file is saved in the 
storage block 502. The microprocessor forms a convo- 

35 lution of the detection file and signature, and saves the 
result in the storage block 501 , in which result each data 
part of the detection file corresponds to an identification 
number, which depicts the suitability of the signature to 
the data part of the detection file. Finally, the microproc- 

40 essor informs the user by the display 506 which the larg- 
est number is, where it is located and if, judging from it, 
it is likely that the file has been found to be authentica- 
tion coded, using the signature saved in the storage 
block 504. The microprocessor can also show the de- 

45 tection file graphically to the user on the display 506, 
whereby the user can visually determine whether the 
signature has been found in the file. 
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Claims 

1. A method for hiding an authentication code (101, 
402, 504) in a digital video data stream (100, 400, 
401), representing pixel values, in which method 
certain pixel values are selected from the digital vid- 
eo data stream for processing on the basis of a sig- 
natur (402), characterized in that the value of each 
pixel value selected for processing is re-determined 
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by a filter (200, 403, 503), which uses as filter input 
only pixel values in the data stream from the vicinity 
of the pixels selected by the signature. 

5 2. A method according to Claim 1 , characterized in 
that said digital video data stream (100, 400, 401) 
is a file and its pixel values are bytes. 

3. A method according to Claim 2, characterized in 
io that said file is an image file. 

4. A method according to Claim 1 , characterized in 

that said digital video data stream (100, 400, 401) 
is a temporally continuous signal and its pixel val- 
15 ues are bytes, whereby a certain temporal period is 
separated from the temporally continuous signal 
and the authentication code is hidden in said sepa- 
rated signal period. 

20 5. A method according to Claim 4, characterized in 

that the authentication code is repeatedly hidden in 
the same temporally continuous signal. 

6. A method according to Claim 1 , characterized in 

25 that a deterministic transformation (T, 505) is also 
carried out on said digital video data stream before 
the pixel values are selected for processing, and a 
reverse transformation (T 1 , 505) of said determin- 
istic transformation is carried out on the trans- 

30 formed digital video data stream after the value of 
each pixel selected for processing has been spec- 
ified anew. 

7. A method for detecting the authentication coding 
35 from a digital video data stream, representing pixel 

values, characterized in that in it 

the digital video data stream is filtered with a 
filter (403) having the same configuration as 
40 that which was used to implement the authen- 

tication coding, 

the pixel values (406) which have their value 
unchanged during filtering are marked, and 
the marked pixels are compared to a predeter- 
45 mined signature (402). 

8. A method according to Claim 7, characterized in 

that a predetermined deterministic transformation 
(T) is also carried out on said digital video data 
so stream before it is filtered. 

9. A device for hiding an authentication code in a dig- 
ital video data stream, representing pixel values, 
which device comprises a memory (501, 502) for 

55 saving said digital video data stream and a signa- 
ture, and a processing unit (500) adapted to read 
the digital video data stream from said memory and 
to select certain pixel values from the digital data 
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stream for processing on the basis of the signature, 
characterized in that it comprises a filter (503), the 
filter uses as input only pixel values of the digital 
data stream from the vicinity of the pixels selected 
for processing by the signature and said processing 
unit is adapted to re-determine the value of each 
pixel value selected for processing in the manner 
specified by said filter. 

10. A device for detecting the authentication coding 
from a digital video data stream, representing pixel 
values, which device comprises a memory (501, 
502) for saving the digital video data stream and a 
processing unit (500) for reading the digital video 
data stream from the memory and for changing the 
value of its pixel values, characterized in that it 
comprises a filter (503) having the same configura- 
tion as that which was used to implement the au- 
thentication coding, and said processing unit is ar- 
ranged to re-determine the value of the pixel values 
of the signal in a manner specified by said filter and 
to save the information of those pixels which have 
their value unchanged during filtering. 

11. A device according to Claim 9 or 1 0, characterized 
in that it also comprises an input device (507) for 
receiving the input data from the user and an output 
device (506) for conveying information about the 
operation to the user. 

1 2. A device according to Claim 9 or 1 0, characterized 

in that it is a sealed authentication coding circuit. 



Patentanspriiche 

1. Verfahren zum Verbergen eines Bildpunktwerte re- 
prasentierenden Authentifikationscodes (101, 402, 
504) in einemdigitalen Videodatenstrom (100, 400, 
401 ), wobei in dem Verfahren bestimmte Bildpunkt- 
werte aus dem digitalen Videodatenstrom zur Ver- 
arbeitung auf der Basis einer Signatur (402) ausge- 
wahlt werden, dadurch gekennzeichnet, dass der 
Wert jedes zur Verarbeitung ausgewahlten Bild- 
punktwertes von einem Filter (200, 403, 503) neu 
bestimmt wird, der als Filtereingang nur Bildpunkt- 
werte im Datenstrom aus der Nahe der von der Si- 
gnatur ausgewahlten Bildpunkte benutzt. 

2. Verfahren nach Anspruch 1 , dadurch gekennzeich- 
net, dass der genannte digitale Videodatenstrom 
(100, 400, 401) eine Datei ist und seine Bildpunkt- 
werte Bytes sind. 

3. Verfahren nach Anspruch 2, dadurch gekennzeich- 
net, dass die genannte Datei eine Bilddatei ist. 

4. Verfahren nach Anspruch 1 , dadurch gekennzeich- 



net, dass der genannte digitale Videodatenstrom 
(100, 400, 401) ein zeitlich kontinuierliches Signal 
ist und seine Bildpunktwerte Bytes sind, so dass ei- 
ne bestimmte Zeitperiode von dem zeitlich kontinu- 
5 ierlichen Signal getrennt wird und der Authentifika- 

tionscode in der genannten getrennten Signalperi- 
ode verborgen ist. 

5. Verfahren nach Anspruch 4, dadurch gekennzeich- 
io net, dass der Authentifikationscode wiederholt in 

dem genannten zeitlich kontinuierlichen Signal ver- 
borgen ist. 

6. Verfahren nach Anspruch 1 , dadurch gekennzeich- 
15 net, dass auch eine deterministische Transformati- 
on (T, 505) an dem genannten digitalen Videoda- 
tenstrom durchgefuhrt wird, bevor die Bildpunkt- 
werte fur die Verarbeitung gewahlt werden, und ei- 
ne Umkehrtransformation (T" 1 , 505) der genannten 

20 deterministischen Transformation an dem transfor- 
mierten digitalen Videodatenstrom durchgefuhrt 
wird, nachdem der Wert jedes fur die Verarbeitung 
ausgewahlten Bildpunktes neu spezifiziert wurde. 

25 7. Verfahren zum Erfassen der Authentifikationsco- 
dierung aus einem Bildpunktwerte reprasentieren- 
den digitalen Videodatenstrom, dadurch gekenn- 
zeichnet, dass darin 

30 - der digitale Videodatenstrom mit einem Filter 
(403) mit derselben Konfiguration gefiltert wird 
wie der, der zur Durchfuhrung der Authentifika- 
tionscodierung verwendet wurde, 
die Bildpunktwerte (406), deren Wert unveran- 

35 dert ist, wahrendder Filterung markiert werden, 

und 

die markierten Bildpunkte mit einer vorbe- 
stimmten Signatur (402) verglichen werden. 

40 8. Verfahren nach Anspruch 7, dadurch gekennzeich- 
net, dass eine vorbestimmte deterministische 
Transformation (T) auch an dem genannten digita- 
len Videodatenstrom vor dessen Filterung durchge- 
fuhrt wird. 

45 

9. Vorrichtung zum Verbergen eines Bildpunktwerte 
reprasentierenden Authentifikationscodes in einem 
digitalen Videodatenstrom, wobei die Vorrichtung 
einen Speicher (501, 502) zum Speichern des ge- 
50 nannten digitalen Videodatenstroms und einer Si- 
gnatur und eine Verarbeitungseinheit (500) um- 
fasst, die die Aufgabe hat, den digitalen Videoda- 
tenstrom aus dem genannten Speicher zu lesen, 
und die bestimmte Bildpunktwerte aus dem digita- 
ls len Datenstrom zur Verarbeitung auf der Basis der 
Signatur auszuwahlen, dadurch gekennzeichnet, 
dass sie ein Filter (503) umfasst, das Filter als Ein- 
gang nur Bildpunktwerte des digitalen Datenstroms 
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aus der Nahe der von der Signatur zur Verarbeitung 
gewahlten Bildpunkte verwendet und die genannte 
Verarbeitungseinheit so gestaltet ist, dass sie den 
Wert jedes Bildpunktwertes, der zur Verarbeitung in 
der von dem genannten Filter vorgegebenen Weise 
ausgewahlt wurde, neu bestimmt. 

10. Vorrichtung zum Erfassen der Authentifikationsco- 
dierung aus einem Bildpunktwerte reprasentieren- 
den digitalen Videodatenstrom, wobei die Vorrich- 
tung einen Speicher (501 , 502) zum Speichern des 
digitalen Videodatenstroms und eine Verarbei- 
tungseinheit (500) zum Lesen des digitalen Video- 
datenstroms aus dem Speicher und zum Andern 
des Wertes seiner Bildpunktwerte umfasst, dadurch 
gekennzeichnet, dass sie ein Filter (503) mit dersel- 
ben Konfiguration hat wie die, die zur Durchfuhrung 
der Authentif ikationscodierung verwendet wird, und 
die genannte Verarbeitungseinheit so angeordnet 
ist, dass sie den Wert der Bildpunktwerte des Si- 
gnals in einer von dem genannten Filter vorgege- 
benen Weise neu bestimmt und die Informationen 
derjenigen Bildpunkte speichert, deren Wert bei der 
Filterung unverandert geblieben sind. 

11. Vorrichtung nach Anspruch 9 Oder 10, dadurch ge- 
kennzeichnet, dass sie auch eine Eingabevorrich- 
tung (507) zum Empfangen der Eingangsdaten von 
dem Benutzer und eine Ausgabevorrichtung (506) 
zum Weiterleiten von Informationen uber den Be- 
trieb an den Benutzer umfasst. 

12. Vorrichtung nach Anspruch 9 oder 10, dadurch ge- 
kennzeichnet, dass sie eine verschlossene Authen- 
tif ikationscodierungsschaltung ist. 



Revendications 

1. Procede pour masquer un code d'authentification 
(101, 402, 504) dans un train dedonnees video nu- 
meriques (100, 400, 401), representant des valeurs 
de pixels, dans lequel procede certaines valeurs de 
pixels sont selectionnees a partir du train de don- 
nees video numeriques en vue de leur traitement 
sur la base d'une signature (402), caracterise en ce 
que la valeur de chaque valeur de pixel selection- 
nee en vue de son traitement est redetermined par 
un filtre (200, 403, 503), qui utilise, en tant qu'entree 
de filtre, uniquement les valeurs de pixels du train 
de donnees provenant du voisinage des pixels se- 
lectionnes par la signature. 

2. Procede selon la revendication 1 , caracterise en ce 
que ledit train de donnees video numeriques (100, 
400, 401) est unfichier etses valeurs de pixels sont 
des octets. 



3. Procede selon la revendication 2, caracterise en ce 
que ledit fichier est un fichier d'image. 

4. Procede selon la revendication 1 , caracterise en ce 
5 que ledit train de donnees video numeriques (1 00, 

400, 401) est un signal temporellement continu et 
ses valeurs de pixels sont des octets, de sorte 
qu'une certaine periode temporelle est separee du 
signal temporellement continu et que le code 
io d'authentification est masque dans ladite periode 
du signal separee. 

5. Procede selon la revendication 4, caracterise en ce 
que le code d'authentification est masque de facon 

is repetitive dans le meme signal temporellement con- 
tinu. 

6. Procede selon la revendication 1 , caracterise en ce 
qu'une transformation deterministe (T, 505) est ega- 

20 lement mise en oeuvre sur ledit train de donnees 
video numeriques avant que les valeurs de pixels 
ne soient selectionnees en vue de leur traitement, 
et une transformation inverse (T 1 , 505) de ladite 
transformation deterministe est mise en oeuvre sur 

25 ledit train de donnees video numeriques transforme 
apres que la valeur de chaque pixel selectionne en 
vue de son traitement ait ete a nouveau specifiee. 

7. Procede pour detecter le codage d'authentification 
30 a partir d'un train dedonnees video numeriques, re- 
presentant des valeurs de pixels, caracterise en ce 
qu'au cours de sa realisation 

le train de donnees video numeriques est filtre 
35 par un filtre (403) ayant la meme configuration 

que celui qui a ete utilise pour mettre en oeuvre 
le codage d'authentification, 
les valeurs de pixels (406) dont la valeur est 
demeuree identique au cours du filtrage sont 
40 marquees, et 

les pixels marques sont compares a une signa- 
ture predeterminee (402). 

8. Procede selon la revendication 7, caracterise en ce 
45 qu'une transformation deterministe predeterminee 

(T) est egalement mise en oeuvre sur ledit train de 
donnees video numeriques avant qu'il ne soit filtre. 

9. Dispositif pour masquer un code d'authentification 
so dans un train de donnees video numeriques, repre- 
sentant des valeurs de pixels, lequel dispositif com- 
prend une memoire (501, 502) destinee a sauve- 
garder ledit train de donnees video numeriques et 
une signature, et une unite de traitement (500) con- 

55 cue pour lire le train de donnees video numeriques 
a partir de ladite memoire et pour selectionner cer- 
taines valeurs de pixels a partir du train de donnees 
video numeriques en vue de leur traitement sur la 
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base de la signature, caracterise en ce qu'il com- 
prend un filtre (503), le filtre utilise, en tant qu'en- 
tree, uniquement les valeurs de pixels du train de 
donnees numeriques provenant du voisinage des 
pixels selectionnes en vue de leur traitement par la 
signature et ladite unite de traitement est congue 
pour redeterminer la valeur de chaque valeur de 
pixel selectionnee en vue de son traitement de la 
maniere specifiee par ledit filtre. 

1 0. Dispositif pour detecter le codage d'authentif ication 
a partir d'un train de donnees video numeriques, re- 
presentant des valeurs de pixels, lequel dispositif 
comprend une memoire (501 , 502) destinee a sau- 
vegarder ledit train de donnees video numeriques 
et une unite de traitement (500) destinee a lire le 
train de donnees video numeriques a partir de ladite 
memoire et a faire varier la valeur de ses valeurs 
de pixels, caracterise en ce qu'il comprend un filtre 
(503) ayant la meme configuration que celui qui a 
ete utilise pour mettre en oeuvre le codage 
d'authentification, et ladite unite de traitement est 
concue pour redeterminer la valeur des valeurs de 
pixels du signal d'une maniere specifiee par ledit 
filtre et pour sauvegarder les informations de ces 
pixels dont la valeur est demeuree inchangee au 
cours du filtrage. 

11. Dispositif selon la revendication 9 ou 10, caracteri- 
se en ce qu'il comprend egalement un dispositif 
d'entree (507) destine a recevoir les donnees d'en- 
tree provenant de I'utilisateur et un dispositif de sor- 
tie (506) destine a transmettre les informations re- 
latives au fonctionnement a I'utilisateur. 

12. Dispositif selon la revendication 9 ou 10, caracteri- 
se en ce qu'il s'agit d'un circuit de codage d'authen- 
tification scelle. 
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